Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mAwdQmiiKEmZ0SFcZWPDWnRiVKU.roa
File: mAwdQmiiKEmZ0SFcZWPDWnRiVKU.roa (raw, json)
Hash identifier: Y5IwsQ4ihwFC12/3vTsanrAwkY15o2063AMEU/BTlCE=
Subject key identifier: 98:0C:1D:42:68:A2:28:49:99:D1:21:5C:65:63:C3:5A:74:62:54:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14D9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mAwdQmiiKEmZ0SFcZWPDWnRiVKU.roa
Signing time: Sun 07 Feb 2021 12:00:19 +0000
ROA not before: Sun 07 Feb 2021 12:00:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.176.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5337 (0x14d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=980C1D4268A2284999D1215C6563C35A746254A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:7c:8f:aa:f5:1a:b4:5f:f2:e9:b5:ce:e2:
0c:e7:97:ad:5a:54:01:46:f7:98:2a:87:82:43:c5:
f1:e7:aa:96:3b:76:a6:07:be:4b:bb:6a:0c:a3:65:
e2:bf:a4:6b:ca:55:60:a8:bd:70:21:3a:18:d6:6c:
56:80:f6:30:31:bf:42:82:a1:76:2b:04:db:27:0d:
a4:5d:4d:a7:96:03:74:e0:a1:b5:e3:46:54:eb:89:
bc:42:40:29:fb:dd:2b:a3:5a:83:37:ef:59:5b:d9:
60:f0:42:6e:ab:d5:e4:25:23:96:98:1f:eb:a2:2f:
e8:68:d3:65:91:e9:42:88:45:51:50:76:72:9e:4a:
86:93:a9:b4:5b:35:5f:4c:cf:4a:f3:c9:22:9e:7a:
f6:2e:bc:e0:64:9c:cc:8a:c7:a6:1d:a5:00:72:76:
bb:b7:91:d7:fa:ea:79:eb:5a:0c:c7:41:de:89:56:
fa:41:72:c6:79:63:4e:00:12:77:e4:85:18:00:25:
1c:50:ef:6b:c1:89:66:2e:c9:b5:8b:c7:dd:5e:59:
f2:da:8f:89:1c:44:d3:fc:8b:54:70:b2:03:a7:3a:
8a:65:70:34:9b:4e:e4:21:ab:c4:89:b4:88:66:33:
98:a6:09:46:94:0b:a5:59:a1:55:f3:55:f9:0e:a0:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0C:1D:42:68:A2:28:49:99:D1:21:5C:65:63:C3:5A:74:62:54:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mAwdQmiiKEmZ0SFcZWPDWnRiVKU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.108.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:88:d6:07:63:5c:3e:5f:39:4f:1b:97:6e:03:7b:65:fb:8a:
3a:96:a5:44:b8:d3:a7:9e:08:02:19:b0:8c:d5:d8:ef:0b:ae:
3e:3c:41:19:3f:62:ac:88:54:5d:5f:4f:18:7d:8a:22:e5:b1:
e9:aa:69:e7:0b:cc:13:cd:b5:fb:d6:0e:5b:67:b9:1a:e3:ef:
f6:e0:d6:74:9c:17:cb:b4:2c:05:2b:21:84:9f:15:84:da:da:
8b:4a:96:ef:43:7c:d5:f1:f9:36:cd:1e:5c:1b:bd:41:75:89:
6b:96:52:17:94:34:6b:b1:c7:cc:0f:80:38:67:d0:9b:05:68:
3a:68:49:1c:d6:25:aa:e0:fc:1b:99:5e:f4:cb:dd:ad:36:56:
d6:2c:9a:0c:ea:8a:0a:7e:2d:92:81:05:c7:7a:ba:e6:37:15:
f3:73:83:f1:0e:90:33:74:40:2f:5a:09:3f:9d:0c:99:c7:f5:
86:64:79:49:c8:1d:97:99:db:0c:d7:85:f4:88:90:14:5d:83:
74:e2:17:60:28:9c:31:39:73:ff:ee:b4:19:bf:bd:cb:2f:47:
76:25:38:73:2f:91:5a:20:37:58:e7:c6:93:5f:a4:e9:f9:44:
5b:81:b0:65:05:a5:56:30:a8:f9:b0:f9:52:a1:85:3a:9f:b5:
a3:3f:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org